Security News URGENT - PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches TheHackerNews Daniel Bender 23 Oct 2026 Share PHP warns CVE-2026-115560 may enable code execution in unusual session setups and advises disabling session upload progress pending a routine fix.